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Subsystem Safety Engineering Through the Project Life Cycle 
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Mission System Requirements 
Definition Review Review 


Preliminary 


n 


Critical 


E 


ORR System Delivery PPRs 


E3 


Test Readiness 
Reviews 


Acceptance 
Readiness Reviews 


Operational 
Readiness Review 


Production 

Performance Reviews 


1 

hase A & Phase A | 

Phase B 

1 Phase C 

1 

Phase D - Development 

1 

1 

Phase E 

- Operations 

Formulation I 

Definition 

I Design 

1 


1 





1 

I 

1 

1 


1 

1 


Retirement/ 



1 

1 


1 


Disposal 


• Feasibility 
Studies 

• Trade Studies 

• Preliminary 
Hazard 
Analysis 

• Reliability 
Assessment 

• Criticality 
Assessment 


System 
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Operation & 

Definition 
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Maintenance 
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• S&MA 
Requirements 
Safety 
Reliability 
Maintainability 
Quality 
Supportability 

• Specifications 
& Standards 

• Program or 
Project Plans 

• PQA 

• RIDjJ 


Prototype & 
Prelim Design 


• Requirements 
Analysis 

• Safety Data 
Package 

• FMEA 

• Drawings 

• Verification 
Plans 

• Prototype 
Concept 

• Analysis & 
Candidate 
Selection List 


Final 

Design 


• Safety Data 
Package 

• FMEA 

• Drawings 

• Verification Plans 

• PQA 

• QA Audit 

• Haz Analysis 
Sust. Eng. Plan 



Integration & 
System Test 


Deployment & 
Acceptance 
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• Inspection 

■ QE (Work Auth) 

• Test Plans & 
Procedures 

• QA Audit 


System Test Report 

• Certification Data 
Package 

• Final Safety Data 
Package 

• FMEA/CIL 

• Verification & 
Validation 

• QA Audit 


Configuration Items 

• Acceptance Data 
Packages 

• GIDEP ALERTS 

• Lessons Learned 

• MCRs 

• QA Audit 

• PRACA 

• RIDs 
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1 Change Requests 
1 Problem Resolution 
1 Training 
1 Flight Rules & 
Procedures 

■ CoFR 

■ Mission Operations 

■ SPIT 


Retirement Plan 
System Closeout 
Report 

Materials Disposition 
Report 

Lessons Learned 


PQA 
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Risk Mana g ement 


Preliminary Hazard Analysis 

Integrated Hazards Analysis 
Subsystems Hazards Analysis 
Element Hazards Analysis 
Human Factor Analysis 
S/W Hazards Analysis 
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Hazards Report Maintenance/ Risk 
Analysis 


Hazard Report Development 
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The Risk Informed Design Process n w 



Update analyses 



Identify set of Risk Drivers for 
the vehicle based on analyses 


Update the Design 

(using the RID to influence 

design/test/Operational 

decisions) 
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• The process is a continuous process throughout the lifecycle of the Project 

• At each design and verification cycle, work to reduce the risk drivers 

• Focus on the Top Drivers to maximize impact 

• When new drivers emerge (new cycles) as Top Drivers, work those drivers 

• Key decision points emerge at various program milestones (e.g. 
Achievability) 
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Types of NASA Hazard Analysis ^ SA 


• Preliminary Hazard Analysis 

• Subsystem Hazard Analysis 

• Element Hazard Analysis 

• Operating and Support Hazard Analysis 

• Software Hazard Analysis 

• Integrated Hazard Analysis 

• Functional Hazard Analysis 
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Preliminary Hazard Analysis (PHA) 


• The PHA is the initial effort in hazard analysis during the early design 
phases that identifies top level hazards and controls, provides a first look 
at the system risk, and provides the foundation for future analyses. It is 
based on the best available data. Sources for data include but are not 
limited to: system description documents, system diagrams, mission 
descriptions, operational concepts, functional analysis/architecture 
documents, Functional Flow Block Diagrams (FFBDs), mishap data from 
similar systems, and lessons learned from other projects. The PHA 
identifies and evaluates the hazards and hazardous events associated 
with the proposed design or functions for potential hazard severity, 
probability, time of exposure, and hazard classification. Design controls, 
software controls, operational controls and other actions needed to 
eliminate hazards or reduce the risk to an acceptable level should be 
considered and documented. 


Hazard Analysis Process 




nVsa 


• Identify hazardous conditions, events or states 

• Identify the effect of the hazardous state 

• Identify severity of the effect 

• Identify all potential causes of the hazardous 
states 

• Identify controls for each of the hazard causes 

• Identify likelihood of each cause 

• Identify verification strategies for the controls 

• Track verification to closure 
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Identify Hazardous Conditions 


Basically this is a brainstorming 
exercise! 

What is inherently dangerous about the 
operation of your system? 

-Standard hazard lists 

-Historical experience/documentation from 
legacy systems 

-Your engineering training and experience 
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Example (V ^ SA 


Docked for 



• ISS Crew Transport Mission 

- Launch a crew to the International Space Station 

- Stay docked to the Space Station for 6 months 

- Return the crew to Earth and land in the water 
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Work a Preliminary Hazard List 




Identify the hazards for this mission. 


NASA Generic Hazards List 


• Collision or Impacts 

• Loss of Control 

• Contamination 

• Corrosion 

• Electrical Discharge/Shock 

• Environmental/Weather 

• Temperature Extremes 

• Gravitational Forces 

• Electromagnetic Interference 

• Radiation 

• Explosion 

• Fire/Overheat 

• Flight Termination Systems 



Implosion/Loss of Pressure 
High Pressure Sources 
Loss of Structural Integrity 
Mechanical 

Loss of Critical Function 

Loss of Safe Return Capability 

Loss of Habitable Environment 

Pathological/Physiological/ 

Psychological 

Inadequate HF Engineering 
Lasers 

Utility Outages 
Common Cause Failures 



Hazard analysis results in the 
identification of risks and the means of 
controlling or eliminating them. Hazard 
analysis also quantifies the risk for the 
Program/Project Manager. 
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Final Thoughts Wr - 


• Hazard analysis is structured process to 

- Identify risk 

- Classify risk 

- Manage risk 

• Hazard analysis is not an exact science 

- Relies on engineering expertise and engineering 
judgment 

- Requires rationale to justify hazard classification 

• Hazard analysis is an important tool in 

- Design Process 

- Requirements Validation 

- Risk Management 
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